News
-
Cyber-Attacks Hobble Some of Europe’s Largest Ports
Cyber-Attacks Hobble Some of Europe’s Largest Ports Oil terminals in some of Europe’s biggest ports appear to have been disrupted by ransomware, according to reports. A broker in the region told AFP that the attacks are disrupting the oil supply chain. “There was a cyber-attack at various terminals, quite some terminals are disrupted,” Jelle Vreeman, senior broker…
-
Trustpilot Set to Sue Firms That Solicit Fake Reviews
Trustpilot Set to Sue Firms That Solicit Fake Reviews Trustpilot said today that it is planning legal action against businesses involved in soliciting fraudulent reviews on its site. The Danish consumer reviews platform said it was forced to remove over two million fake reviews in 2020 alone, accounting for nearly 6% of those submitted to…
-
NPM JavaScript registry suffers massive influx of malware, report says
The popular NPM JavaScript package manager and registry has been hit with an influx of malicious packages, the most harmful of which are related to data theft, crypto mining, botnets, and remote code execution, according to research from security company WhiteSource. WhiteSource’s automated malware detection platform, WhiteSource Diffend, detected a total of 1,300 malicious packages…
-
How Phishers Are Slinking Their Links Into LinkedIn
If you received a link to LinkedIn.com via email, SMS or instant message, would you click it? Spammers, phishers and other ne’er-do-wells are hoping you will, because they’ve long taken advantage of a marketing feature on the business networking site which lets them create a LinkedIn.com link that bounces your browser to other websites, such…
-
Google adds Python to its differential privacy repertoire
Google has announced it’s adding Python to the languages supported by one of its open-source projects designed to bolster privacy on the internet. The project includes a library and tools for using differential privacy, a technology designed to preserve an individual’s privacy in large data sets. “Previously, our differential privacy library was available in three…
-
Education Provider Infosec Announces New Cybersecurity Scholarships
Education Provider Infosec Announces New Cybersecurity Scholarships Cybersecurity education provider Infosec Institute is offering scholarships to 15 individuals from underrepresented groups in the cybersecurity industry. The $225k in scholarship opportunities will be meted out to veterans, people who identify as BIPOC, students, women who are actively pursuing a career in cybersecurity and members of the LGBTQI+ communities.…
-
Iranian APT group uses previously undocumented Trojan for destructive access to organizations
Researchers have come across a previously undocumented Trojan used by an APT group of Iranian origin that has been targeting organizations in Israel but also other countries since last year with the intention of damaging their infrastructure. The group, tracked as Moses Staff by researchers from security firm Cybereason, has been operating since at least…
-
DHS Creates Cyber Safety Review Board
DHS Creates Cyber Safety Review Board The United States Department of Homeland Security has established a Cyber Safety Review Board (CSRB) to investigate “significant cyber incidents.” Mandated via President Joe Biden’s May 12 2021 executive order (EO 14028) on improving the nation’s cybersecurity, the board “shall review and assess, with respect to significant cyber incidents […]…
-
BlackCat ransomware – what you need to know
BlackCat (also known as ALPHV) is a relatively new ransomware-as-a-service operation, which has been aggressively recruiting affiliates from other ransomware groups and targeting organisations worldwide. Read more in my article on the Tripwire State of Security blog. Read More
-
#Enigma2022: Contextual Security Should Supplement Machine Learning for Malware Detection
#Enigma2022: Contextual Security Should Supplement Machine Learning for Malware Detection Malware continues to be one of the most effective attack vectors in use today, and it is often combatted with machine learning-powered security tools for intrusion detection and prevention systems. According to Nidhi Rastogi, Assistant Professor at the Rochester Institute of Technology, machine learning security…